SOC Engineer, L3

AIOPSGROUP Careers

Senior Security Operations Analyst addressing complex security challenges at AIOPSGROUP. Leading incident response and mentoring junior analysts in a hybrid work environment.

Posted 6/17/2026full-timeSofia • 🇧🇬 BulgariaMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudLinuxSwift

About the role

Key responsibilities & impact

Lead and coordinate cross-functional teams during severe security breaches, ransomware attacks, or insider threat incidents, ensuring swift containment and effective resolution.
Design and execute hypothesis-driven threat hunting exercises to uncover hidden threats that evade automated security tools, continuously strengthening the organization's defensive posture.
Optimize SIEM logic, tune threat intelligence feeds, and develop custom correlation rules and automation playbooks to enhance the accuracy and efficiency of threat detection.
Conduct in-depth forensic investigations to reconstruct multi-stage intrusions and analyze malicious code, providing actionable insights to prevent future incidents.
Provide ongoing guidance, coaching, and training to Tier 1 and Tier 2 analysts, fostering a culture of continuous learning and professional development within the security team.

Requirements

What you’ll need

Deep architectural understanding of network protocols, operating system internals (Windows/Linux), cloud ecosystem components, and distributed endpoint telemetry.
Proven proficiency navigating and exploiting advanced SIEMs like Microsoft Sentinel, enterprise EDR/XDR suites like MS Defender, SOAR platforms, and deep-dive packet analysis tools like Wireshark.
Demonstrated ability to coordinate, command, and guide both technical engineering cells and business units under extreme operational pressure.
Strong strategic thinking and clear executive communication.
Nice to have: Advanced Incident Capabilities with proven background executing live disk/memory forensics and parsing obfuscated malicious binaries via static and dynamic analysis. Elite Certifications like GIAC (GCFA, GCIH), CISSP, or equivalent high-tier defensive engineering credentials.

Benefits

Comp & perks

Competitive remunerations and benefits package
Opportunity to grow your career and get exposure to international brands, working on complex multi-technology projects
Friendly, yet competitive work environment where everyone’s success is celebrated
Flexible working hours/working location

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

threat huntingforensic investigationsSIEM optimizationmalicious code analysisincident responsedisk forensicsmemory forensicsstatic analysisdynamic analysisnetwork protocols

Soft Skills

leadershipcoachingstrategic thinkingexecutive communicationteam coordinationproblem-solvingcrisis managementinterpersonal skillstrainingguidance

Certifications

GIAC GCFAGIAC GCIHCISSP